traefik配置用户端透传ip（前端ELb 基于k8s平台）

Posted 2021-09-03 潘康宁111

参考链接
http://www.robbinsconsultingservices.com/traefik-proxy-protocol-setup/
https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/enable-proxy-protocol.html
https://my.oschina.net/u/4147980/blog/3234769



总结：traefik的配置很简单，一般后端程序通过 X-Forwarded-For 头获取用户IP，只需要在entrypoints中设置允许请求头的转发即可
http配置：
[entryPoints.http.proxyProtocol]
insere=true
[entryPoints.http.forwardedHeaders]
insere=true

https配置：
[entryPoints.https.proxyProtocol]
insere=true
[entryPoints.https.forwardedHeaders]
insere=true
需要注意的是traefik的前端中间件ELb要启用代理协议支持，其次，配置ingress服务启用代理协议

apiVersion: v1
items:

• apiVersion: v1
  kind: Service
  metadata:
  annotations:
  service.beta.kubernetes.io/aws-load-balancer-proxy-protocol: \'*\'- 1.